CVE-2010-4909

creationtimestamp| type| source ---|---|--- 2010-09-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34619 2010-09-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34620...

Adobe Dreamweaver CS5 11.0 build 4909 - mfc90loc.dll DLL Hijacking

Adobe Dreamweaver CS5 11.0 build 4909 - mfc90loc.dll DLL Hijacking / Exploit Title: Adobe Dreamweaver CS5 DLL Hijacking Exploit mfc90loc.dll Date: 25/08/2010 Author: Bruno Filipe diwr http://digitalacropolis.us Software Link: http://www.adobe.com Version: int main WinExec"calc", SWNORMAL; exit0;...

CVE-2009-4909

The provided documents identify CVE-2009-4909 as a vulnerability in oBlog’s admin/index.php that allows remote attackers to perform brute-force password guessing via HTTP requests. This mode cites concrete details: affected component is the oBlog admin login, and the root cause is insufficient pr...

CVE-2008-4909

CVE-2008-4909 refers to a CSRF vulnerability in CompactCMS 1.1 and earlier, allowing remote attackers to perform unauthorized actions as legitimate users via unspecified vectors. The connected documents reiterate the same description without detailing affected versions beyond “1.1 and earlier,” n...

CVE-2008-4909

Cross-site request forgery CSRF vulnerability in CompactCMS 1.1 and earlier allows remote attackers to perform unauthorized actions as legitimate users via unspecified vectors...

CVE-2008-4909

Cross-site request forgery CSRF vulnerability in CompactCMS 1.1 and earlier allows remote attackers to perform unauthorized actions as legitimate users via unspecified vectors...

CVE-2007-4909

WinSCP (before 4.0.4) is affected by an interpretation conflict in its URL handler that lets remote attackers perform arbitrary file transfers via certain scp/sftp/ftp URLs, by abusing a login-as-username on the URL which is parsed differently by the protocol handler. The issue is described as a ...

WinSCP URL Protocol Handler Arbitrary File Transfer

According to its version, the installation of WinSCP on the remote host fails to completely sanitize input to the SCP and SFTP protocol handlers. If an attacker can trick a user on the affected host into clicking on a malicious link, a file transfer can be initiated to or from the affected host. ...

KLA11447 ACE vulnerability in WinSCP

Interpretation conflict vulnerability was found in WinSCP. Malicious users can exploit this vulnerability remotely to execute arbitrary code. Original advisories - Related products WinSCP CVE list CVE-2007-4909 critical Solution Update to the latest version Download WinSCP Impacts ACE Arbitrary...

CVE-2006-4909

Cisco Guard DDoS Mitigation Appliance (before 5.1(6)) contains a cross-site scripting (XSS) vulnerability that can be triggered when anti-spoofing is enabled. Remote attackers can inject arbitrary web script or HTML through certain URL character sequences that are mishandled during the appliance’...